Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: JetBrains Hub 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 Clear all filters
TI-2026-36991 CVE-2026-50242 · GHSA-xqpc-xqhc-3crx

Missing authentication in JetBrains Hub

Priority MEDIUM 50

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00611 Published 2026-06-19 Fixed in 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 CWE-306
TI-2026-40518 CVE-2026-56142 · GHSA-v6fr-2xp3-xpr7

Mass assignment in JetBrains Hub

Priority MEDIUM 44

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00623 Published 2026-06-19 Fixed in 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 CWE-915
TI-2026-40517 CVE-2026-56141 · GHSA-cq2r-w6jr-x35w

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120…

Priority MEDIUM 49

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00522 Published 2026-06-19 Fixed in 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 CWE-338